IBM IAM Consultant (ISIM / ISAM / IGI)

ExcelGens Consulting Sverige AB; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

ExcelGens Consulting Sverige AB is seeking an experienced IBM IAM Consultant to implement and support IBM ISIM, ISAM, and IGI solutions in Saudi Arabia. The role focuses on secure identity lifecycle management, authentication, and compliance across on-premises and cloud integrations.

The candidate will configure SSO, MFA, and federation, govern access, and integrate IAM platforms with AD/LDAP, HR systems, and databases.

Qualifications

• Hands-on experience with IBM ISIM, ISAM, IGI implementations and support.
• Strong understanding of IAM lifecycle, provisioning, and access governance.
• Experience with SSO, MFA, federation, and related protocols (SAML, OAuth, OIDC, Kerberos).

Responsibilities

• Implement, configure, and maintain IBM ISIM/ISAM/IGI solutions.
• Manage identity lifecycle: provisioning, de-provisioning, role mgmt, password mgmt.
• Configure and support SSO, MFA, federation and access policies.
• Develop or customize provisioning workflows, connectors, and adapters.
• Troubleshoot IAM incidents and provide production support.
• Support IAM upgrades, migrations, patches and performance optimization.
• Maintain technical docs and runbooks.

Skills

IBM ISIM

IBM ISAM

IBM IGI

IAM concepts

SSO

MFA

SAML 2.0

OAuth 2.0

OIDC

Kerberos

LDAP/AD

REST/SOAP

Job description

NOTE: ONLY LOOKING FOR RESOURCES CURRENTLY STAYING IN KSA.

Role Overview:

We are looking for an experienced IBM IAM Consultant to implement, configure, integrate, and support IBM Identity and Access Management solutions, ensuring secure identity lifecycle management, authentication, authorization, and compliance.

Key Responsibilities:

• Implement, configure, and maintain IBM ISIM, ISAM, and IGI solutions.
• Manage identity lifecycle processes, including user provisioning, de-provisioning, role management, and password management.
• Configure and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation.
• Implement identity governance, access certifications, role management, and Segregation of Duties (SoD) controls.
• Integrate IAM platforms with enterprise applications, Active Directory, LDAP, databases, HR systems, and cloud platforms.
• Develop and customize provisioning workflows, policies, connectors, and adapters.
• Troubleshoot IAM incidents, perform root cause analysis, and provide production support.
• Support IAM upgrades, migrations, patches, deployments, and performance optimization.
• Maintain technical documentation, operational runbooks, and compliance evidence.

Required Skills:

• Hands-on experience with IBM Security Identity Manager (ISIM), IBM Security Verify Access (ISAM), and IBM Security Identity Governance and Intelligence (IGI).
• Strong understanding of IAM concepts, identity lifecycle management, provisioning, and access governance.
• Experience with SSO, MFA, federation, and authentication/authorization protocols such as SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and Kerberos.
• Knowledge of LDAP, Active Directory, and IBM Security Directory Server.
• Experience configuring ISAM WebSEAL, reverse proxy, and access policies.
• Ability to develop or customize workflows, connectors, and adapters using Java, JavaScript, BeanShell, or Groovy.
• Familiarity with REST APIs, SOAP web services, SCIM, SQL, and relational databases.
• Understanding of Linux/UNIX, Windows administration, SSL/TLS, PKI, and digital certificates.
• Knowledge of identity governance, access certifications, role mining, SoD, and compliance reporting.

Preferred Qualifications

• Experience integrating IAM solutions with cloud platforms such as Microsoft Entra ID, AWS, or GCP.
• Familiarity with ITIL processes and ServiceNow or similar ticketing tools.
• Relevant IBM ISIM, ISAM, or IGI certifications.